chore(deps): update all digest updates (#752)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/build.yml

@@ -363,7 +363,7 @@ jobs:
           severity: "CRITICAL,HIGH"
       - name: Upload Trivy scan results to GitHub Security tab
         if: always()
-        uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
+        uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
         with:
           sarif_file: "trivy-results.sarif"
           category: "${{ matrix.image }}"

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
           fetch-depth: 0
       - name: Generate changelog and determine version
         id: changelog
-        uses: TriPSs/conventional-changelog-action@91be4f3188da74fe85de9caffcebc80b26d43b5b # v6
+        uses: TriPSs/conventional-changelog-action@952b14bbc4be87e8458a6ac5926fc655608b1b19 # v6
         with:
           github-token: ${{ secrets.GH_RELEASE_PAT }}
           skip-on-empty: ${{ github.event_name != 'workflow_dispatch' }}

.github/workflows/renovate.yml

@@ -16,7 +16,7 @@ jobs:
             renovate.json
           sparse-checkout-cone-mode: false
       - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: 24
           cache: npm

.github/workflows/test-yaml-schema.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
         with:
           node-version: 24
           cache: npm

target/filter/Dockerfile

@@ -1,4 +1,4 @@
-FROM rspamd/rspamd:4.0@sha256:d35a5c8367e98df7d8fd0c3c91e3b2d75a78bc82a9fbb0780d5c15f966ddd1c5
+FROM rspamd/rspamd:4.0@sha256:420ff124aaa35486d628af955831f9764831290ccc59914018e75dedad88cc3f
 
 LABEL maintainer="https://github.com/jeboehm/docker-mailserver"
 LABEL vendor="https://github.com/jeboehm/docker-mailserver"

target/unbound/Dockerfile

@@ -1,4 +1,4 @@
-FROM alpinelinux/unbound:latest@sha256:1faff2edd09b80e2e4fd582c28f2a97e9850e350209d54c620d2aabd3c841ac7
+FROM alpinelinux/unbound:latest@sha256:c7e8fca36d3427b614a78ee12dcf582ebf0c7874e9eef967ca4d57c292329e57
 
 LABEL maintainer="https://github.com/jeboehm/docker-mailserver"
 LABEL vendor="https://github.com/jeboehm/docker-mailserver"